Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
File: cub9InHd4QiG2X_xRwPlgaIEtl4.mft (raw, json)
Hash identifier: I6EBMcliAC5nREUj7BX/5l8AOgf+SPnQ6C1dqEBBack=
Subject key identifier: 18:9F:17:28:A7:30:B8:BC:14:79:4D:22:58:06:77:7A:A7:06:F8:9F
Authority key identifier: 72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
Certificate issuer: /CN=72e6fd2271dde10886d97ff14703e581a204b65e
Certificate serial: 019CAB6B1A4A05FE5D071656F13D5D5E790B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
Manifest number: 081C
Signing time: Sun 01 Mar 2026 22:00:48 +0000
Manifest this update: Sun 01 Mar 2026 22:00:48 +0000
Manifest next update: Mon 02 Mar 2026 22:00:48 +0000
Files and hashes: 1: aMBkxohgXCBHlVf4cqZehB-dZl8.roa (hash: 52GsVdhZ9s3mGch2GNyJmZC5fofL+PlpDWV6v2/k90g=)
2: cub9InHd4QiG2X_xRwPlgaIEtl4.crl (hash: l0O2WUqUMEwaFHjjm2lr9LZH8kO+/Nx5djGkc31k3J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1a:4a:05:fe:5d:07:16:56:f1:3d:5d:5e:79:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6fd2271dde10886d97ff14703e581a204b65e
Validity
Not Before: Mar 1 22:00:48 2026 GMT
Not After : Mar 2 22:00:48 2026 GMT
Subject: CN=189f1728a730b8bc14794d225806777aa706f89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:e4:2a:a0:9d:e9:b7:d3:de:2f:06:ef:14:
06:80:2b:7d:8b:f3:2d:6f:a5:2b:b8:96:ca:28:84:
59:50:da:f7:2d:f0:51:30:ae:be:7e:68:b4:5f:09:
ca:f8:a1:47:d0:e7:00:2c:e7:7d:ba:cb:86:2c:f6:
6e:94:94:40:a2:a3:83:74:91:b4:51:86:f6:92:33:
4a:a8:71:ba:8f:7f:20:76:5d:49:12:36:a6:fb:ad:
ae:90:6d:49:45:fb:66:a7:1f:65:be:3e:44:7c:85:
4b:4d:76:b2:84:c5:a9:cc:ce:49:65:6b:96:3d:d7:
7a:a8:96:de:d6:1c:1c:a2:7e:09:23:78:bb:30:4b:
7d:3b:74:46:aa:25:bf:e5:f3:c8:39:92:af:de:3f:
c2:d8:26:63:29:97:62:20:e2:1c:b4:42:03:c2:de:
9c:1d:b2:61:9c:10:56:b3:97:db:7b:93:1f:05:9f:
0c:83:25:86:6e:8b:1c:5d:c8:08:e5:e1:47:02:32:
5d:b1:b6:ac:fe:38:af:38:e7:f0:99:f3:90:9a:5d:
db:e4:a2:96:6c:6b:f5:32:de:da:56:26:5d:75:42:
ba:87:3b:c0:4d:ce:15:33:05:36:5c:f3:8b:73:f6:
d5:bd:eb:8b:a7:fe:24:d7:99:ef:f7:1e:b7:71:02:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9F:17:28:A7:30:B8:BC:14:79:4D:22:58:06:77:7A:A7:06:F8:9F
X509v3 Authority Key Identifier:
keyid:72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b2:8d:3a:6c:a1:42:4d:5e:35:d1:8c:f7:67:ec:42:70:96:
16:be:9e:42:ad:96:01:2d:46:f5:ab:a0:36:2b:e4:93:d7:1f:
61:f0:93:af:99:58:43:b8:cf:5e:c0:ac:2e:be:90:ae:db:9a:
56:7a:f1:d1:6f:28:86:4b:e7:37:62:81:5f:fd:28:df:98:a8:
52:eb:2c:7e:89:d8:13:9c:b9:8f:3b:7a:71:12:74:25:9b:54:
03:b0:19:1b:55:7b:cc:e6:0e:be:d0:a9:78:a2:16:1f:21:1e:
a3:a5:53:41:ff:96:9c:19:37:d1:fe:dc:b6:04:74:45:7e:d4:
43:c1:bd:20:c7:e7:da:a3:cc:76:06:6a:fb:7f:f9:2f:be:9f:
7c:3b:08:e7:e0:51:96:c4:d3:10:3a:18:f7:63:b8:3b:4a:75:
0d:e6:a6:e7:29:39:b6:f2:c5:b9:0a:79:50:aa:0a:f5:51:2c:
4a:84:e0:b2:21:21:26:48:d3:50:2e:c2:6a:19:3a:79:4a:ee:
a1:18:1f:d0:96:93:f8:95:b9:88:63:c2:64:fe:0c:40:9b:3a:
95:d4:cd:2c:eb:30:cb:2c:8e:75:02:e7:bb:a7:4c:78:2b:c4:
c9:9d:33:fa:6f:9f:6c:e3:8b:0c:2c:7f:13:77:4c:91:dc:10:
8b:ed:65:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyraxpKBf5dBxZW8T1dXnkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTZmZDIyNzFkZGUxMDg4NmQ5N2ZmMTQ3MDNlNTgxYTIw
NGI2NWUwHhcNMjYwMzAxMjIwMDQ4WhcNMjYwMzAyMjIwMDQ4WjAzMTEwLwYDVQQD
EygxODlmMTcyOGE3MzBiOGJjMTQ3OTRkMjI1ODA2Nzc3YWE3MDZmODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcvkKqCd6bfT3i8G7xQGgCt9i/Mt
b6UruJbKKIRZUNr3LfBRMK6+fmi0XwnK+KFH0OcALOd9usuGLPZulJRAoqODdJG0
UYb2kjNKqHG6j38gdl1JEjam+62ukG1JRftmpx9lvj5EfIVLTXayhMWpzM5JZWuW
Pdd6qJbe1hwcon4JI3i7MEt9O3RGqiW/5fPIOZKv3j/C2CZjKZdiIOIctEIDwt6c
HbJhnBBWs5fbe5MfBZ8MgyWGboscXcgI5eFHAjJdsbas/jivOOfwmfOQml3b5KKW
bGv1Mt7aViZddUK6hzvATc4VMwU2XPOLc/bVveuLp/4k15nv9x63cQJH4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBifFyinMLi8FHlNIlgGd3qnBvifMB8GA1UdIwQY
MBaAFHLm/SJx3eEIhtl/8UcD5YGiBLZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ViOUluSGQ0UWlHMlhfeFJ3UGxnYUlFdGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83MDY1OGItMzc3YS00OTE1LWIxZTgt
NmFmMjE1YmZmMWNlLzEvY3ViOUluSGQ0UWlHMlhfeFJ3UGxnYUlFdGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83MDY1OGItMzc3YS00OTE1LWIxZTgtNmFmMjE1YmZmMWNl
LzEvY3ViOUluSGQ0UWlHMlhfeFJ3UGxnYUlFdGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLKNOmyh
Qk1eNdGM92fsQnCWFr6eQq2WAS1G9augNivkk9cfYfCTr5lYQ7jPXsCsLr6Qrtua
Vnrx0W8ohkvnN2KBX/0o35ioUussfonYE5y5jzt6cRJ0JZtUA7AZG1V7zOYOvtCp
eKIWHyEeo6VTQf+WnBk30f7ctgR0RX7UQ8G9IMfn2qPMdgZq+3/5L76ffDsI5+BR
lsTTEDoY92O4O0p1Deam5yk5tvLFuQp5UKoK9VEsSoTgsiEhJkjTUC7Cahk6eUru
oRgf0JaT+JW5iGPCZP4MQJs6ldTNLOswyyyOdQLnu6dMeCvEyZ0z+m+fbOOLDCx/
E3dMkdwQi+1lRQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:37 2026 by rpki-client